Ethical Hacking Automation

Automate Recon and scanning process with Vidoc. All security teams in one place

Selenium Grid Console - Detect

By kannthu

Informative
Vidoc logoVidoc Module
#misconfig#unauth#selenium
Description

What is the "Selenium Grid Console - Detect" module?

The "Selenium Grid Console - Detect" module is designed to detect the presence of the Selenium Grid Console panel. Selenium Grid is a tool used for distributed testing of web applications across different browsers and operating systems. This module focuses on identifying the configuration of the Selenium Grid Console, which can help in identifying potential misconfigurations or vulnerabilities.

This module has an informative severity level, meaning it provides valuable information but does not pose an immediate threat.

Author: pussycat0x

Impact

The impact of the "Selenium Grid Console - Detect" module is primarily informational. It helps identify the presence of the Selenium Grid Console panel, which can assist in assessing the security posture of the target system. However, it does not directly exploit or cause any harm to the system.

How does the module work?

The "Selenium Grid Console - Detect" module works by sending HTTP requests to specific endpoints associated with the Selenium Grid Console. It uses matching conditions to determine if the panel is present and accessible.

For example, it may send a GET request to the "/grid/console" or "/console" paths. The module then checks the response body for specific words like "Grid Console" and "view config" to confirm the presence of the Selenium Grid Console. Additionally, it verifies that the response status is 200 (OK).

The module's matching conditions ensure that both the expected content and response status are met, indicating the successful detection of the Selenium Grid Console.

Module preview

Concurrent Requests (1)
1. HTTP Request template
GET/grid/console/console
Matching conditions
word: Grid Console, view configand
status: 200
Passive global matcher
No matching conditions.
On match action
Report vulnerability